Improper input validation in MySQL Server - CVE-2022-21595

Vulnerability identifier: #VU68461

CSH Severity: Low

CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-21595

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote privileged user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the C API component in MySQL Server. A remote privileged user can exploit this vulnerability to perform a denial of service (DoS) attack.

MySQL Server
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Enterprise Storage
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
mariadb-tools-debuginfo
libmariadbd-devel
libmariadbd19
libmariadbd19-debuginfo
mariadb-client-debuginfo
mariadb
mariadb-debuginfo
mariadb-debugsource
mariadb-tools
mariadb-client
mariadb-errormessages

Install updates from vendor's website.

MySQL Server - addressed in versions 5.7.37, 8.0.28
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.1
EMC ViPR SRM - update to 4.8.0.1
mariadb-tools-debuginfo - update to 10.4.28-150200.3.38.1
libmariadbd-devel - update to 10.4.28-150200.3.38.1
libmariadbd19 - update to 10.4.28-150200.3.38.1
libmariadbd19-debuginfo - update to 10.4.28-150200.3.38.1
mariadb-client-debuginfo - update to 10.4.28-150200.3.38.1
mariadb - update to 10.4.28-150200.3.38.1
mariadb-debuginfo - update to 10.4.28-150200.3.38.1
mariadb-debugsource - update to 10.4.28-150200.3.38.1
mariadb-tools - update to 10.4.28-150200.3.38.1
mariadb-client - update to 10.4.28-150200.3.38.1
mariadb-errormessages - update to 10.4.28-150200.3.38.1

• https://www.oracle.com/security-alerts/cpuoct2022.html

• Multiple vulnerabilities in MySQL Server
• Multiple vulnerabilities in Dell SRM and Dell Storage Monitoring and Reporting
• SUSE update for mariadb